High severity · published Feb 11, 2020
CVE-2020-0618
Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
RansomwareIn wildKEV
8.8
CVSS
99%
EPSS
Yes
On KEV
Description
A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)99.0% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Sep 18, 2024
Federal remediation dueOct 9, 2024
Ransomware campaign useKnown
Affected products
Which versions
MS
Microsoft SQL Server · Microsoft
2012 for 32-bit Systems Service Pack 4 (QFE); 2012 for x64-based Systems Service Pack 4 (QFE); 2016 for x64-based Systems Service Pack 2 (CU) · source: vendor
MS
Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU) · Microsoft
All versions, or not specified · source: vendor
MS
Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR) · Microsoft
All versions, or not specified · source: vendor
MS
Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU) · Microsoft
All versions, or not specified · source: vendor
MS
Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR) · Microsoft
All versions, or not specified · source: vendor
MS
Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR) · Microsoft
All versions, or not specified · source: vendor
SS
Sql Server · Microsoft
2012; 2014; 2016 · source: NVD, KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-0618
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-0618
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
x_refsource_MISC
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618
x_refsource_MISC
http://packetstormsecurity.com/files/156707/SQL-Server-Reporting-Services-SSRS-ViewState-Deserialization.html
x_refsource_MISC
http://packetstormsecurity.com/files/159216/Microsoft-SQL-Server-Reporting-Services-2016-Remote-Code-Execution.html
More from Microsoft SQL Server
8.8
CVE-2019-1068
Microsoft SQL Server Remote Code Execution Vulnerability
9.8
CVE-2018-8273
A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system, aka "Microsoft SQL Server Remote Code Execution…